Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.mft
File:                     mGEg4ZQx4sP-mWUDvnAHIhNUl5A.mft (raw, json)
Hash identifier:          COQZrWQ8xLX4y5UmQMQvMOha6Yza8R19WSl5d1JrxYg=
Subject key identifier:   CB:98:25:CD:36:DD:2C:8C:82:A0:68:6C:A3:9C:7E:A0:4C:B4:7C:DD
Authority key identifier: 98:61:20:E1:94:31:E2:C3:FE:99:65:03:BE:70:07:22:13:54:97:90
Certificate issuer:       /CN=A91B0B89/serialNumber=986120E19431E2C3FE996503BE70072213549790
Certificate serial:       26
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.mft
Manifest number:          24
Signing time:             Sat 11 Jul 2026 09:49:48 +0000
Manifest this update:     Sat 11 Jul 2026 09:49:48 +0000
Manifest next update:     Sat 18 Jul 2026 09:49:48 +0000
Files and hashes:         1: mGEg4ZQx4sP-mWUDvnAHIhNUl5A.crl (hash: OScmYDkONXNkuJzhmw2FQ9KSduKo5n5fP97YLzWuIdk=)
                          2: 9D93B6606CBC11F195C2A0A38947A888.roa (hash: ODjfSxOwFCR/d39ZrZoXNmBMiXhRlrDkuBwkRzEF8QA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.crl
                          rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Jul 2026 09:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0B89, serialNumber=986120E19431E2C3FE996503BE70072213549790
        Validity
            Not Before: Jul 11 09:49:48 2026 GMT
            Not After : Jul 18 09:49:48 2026 GMT
        Subject: CN=6a5211bc-2065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:42:77:10:0c:0c:a0:b9:8b:42:f5:a0:c4:ad:
                    c4:92:1d:b4:fa:fb:ce:a1:ab:4f:f2:52:3c:bd:52:
                    2d:31:d6:f6:7e:f1:26:e5:71:71:b5:2c:ab:8b:f8:
                    b5:18:d8:eb:f8:e7:9c:24:9b:b8:c2:cc:d2:c8:4b:
                    a0:5e:8f:0a:4c:bb:e8:c3:fc:ca:03:5f:d8:d9:9f:
                    fe:dd:03:23:69:78:fe:f2:e7:d3:72:ae:72:8c:f5:
                    fb:e1:b0:0e:53:d2:16:95:18:82:a4:af:13:5c:5d:
                    26:6f:64:1c:ec:04:1c:e9:0f:50:17:9c:10:c0:e6:
                    dd:6f:56:75:ac:7f:2b:41:ac:9f:e7:4f:b3:33:f4:
                    2b:d3:83:94:0f:72:09:c8:56:d5:87:af:5c:65:69:
                    1c:38:91:0a:d0:7e:dd:96:b5:00:e2:f0:60:1a:5c:
                    ab:13:96:93:55:24:51:9c:95:61:d5:15:8b:e2:a6:
                    10:a4:f7:5a:bd:7c:47:ce:ad:bd:e1:ad:3e:87:db:
                    44:78:dc:13:60:2e:7b:06:52:8f:07:43:07:80:b2:
                    89:12:a0:5e:3c:76:0f:98:20:74:a8:a3:d4:5d:2c:
                    12:36:d4:33:bd:20:41:a4:2b:85:a0:0c:bd:e3:5b:
                    17:c7:e8:6a:8c:a9:cf:59:2a:77:85:3c:94:5a:4e:
                    28:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:98:25:CD:36:DD:2C:8C:82:A0:68:6C:A3:9C:7E:A0:4C:B4:7C:DD
            X509v3 Authority Key Identifier:
                keyid:98:61:20:E1:94:31:E2:C3:FE:99:65:03:BE:70:07:22:13:54:97:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:d6:12:10:00:76:00:de:0b:d9:3b:27:93:0f:be:98:ff:8b:
         11:e8:70:9b:13:63:5f:cc:3b:71:de:01:8b:50:52:a4:99:98:
         d4:44:7f:32:e5:9a:dd:ff:94:36:bc:19:80:1e:ad:28:34:0d:
         96:fc:2f:30:4d:a7:68:f2:5b:a3:32:b2:d9:57:51:46:1e:9e:
         19:ef:b1:b3:7b:70:f8:d3:35:e7:24:75:68:0a:e6:96:a4:44:
         a7:92:d1:f4:37:d9:23:c1:07:0b:29:d9:47:02:ab:85:a6:52:
         16:89:e3:72:6b:72:ec:29:34:03:6c:d4:28:cd:13:38:21:55:
         e7:79:0d:15:07:64:75:ba:f1:d4:15:74:f8:67:37:06:1c:72:
         17:d7:9d:30:3a:34:79:f2:70:84:f5:87:4e:ae:61:c6:24:c4:
         e6:42:43:63:6b:57:09:63:0a:5e:a9:76:f5:d8:f2:b7:e6:2b:
         ce:0a:18:a6:d8:8c:4f:3d:b6:30:bb:b4:e9:bc:22:6a:88:5a:
         3f:0a:6b:c8:d2:49:b7:f0:3c:8a:c4:d4:99:e8:5b:d4:a2:2a:
         5c:3a:d3:0a:59:af:ba:34:14:6c:1e:f2:1a:7b:6d:dc:16:0a:
         e3:72:ef:98:4a:2d:b4:e0:81:c9:1c:c9:86:83:b1:18:21:e0:
         47:13:b4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 16:28:13 2026 by rpki-client